Do you use form-authentication or http-authentication?
If the authentication is with a form the forward button wil show you the form in step 5. Ronald. On Wed Aug 03 15:56:11 CEST 2005 Tomcat Users List <[email protected]> wrote:
I have the following scenario that I am testing. 1. Go to www.yahoo.com(or wherever) 2. Type in URL of Servlet1 and log in using username/password 3. Once username/password is authenticated, get forwarded to Servlet2 4. Click browser back button all the way to www.yahoo.com 5. Click browser forward button to Servlet2 Is there any way of ensuring that users cannot "forward" to Servlet2, but have to login again? I have tried to disable caching that this does not solve the problem. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
